Key findings#
- 45.2% of popular .tw domains that receive email publish no DMARC record at all. Among the world’s top 2,000 sites, the figure is 13.9%.
- Only 24.1% of the .tw domains enforce DMARC (quarantine or reject), against 67.1% of the global top sites.
- 30.6% of the .tw domains have DMARC at p=none: reports only, so spoofed mail is still delivered.
- 82.2% publish SPF, which is close to the global 93.8%. The gap is DMARC, not SPF.
- Commercial .com.tw domains are no better than average: 42.3% have no DMARC and 25.4% enforce it.
Results#
| Measure | Popular .tw domains | Global top 2,000 |
|---|---|---|
| Domains checked | 1,915 | 1,374 |
| SPF published | 82.2% | 93.8% |
| More than one SPF record (an error) | 1.2% | 0.6% |
| No DMARC record | 45.2% | 13.9% |
| DMARC p=none (monitor only) | 30.6% | 18.7% |
| DMARC p=quarantine | 15.9% | 26.1% |
| DMARC p=reject | 8.3% | 41.0% |
| DMARC enforced (quarantine or reject) | 24.1% | 67.1% |
| Single SPF ending in ~all or -all, and DMARC enforced | 22.6% | 63.4% |
| Domain type | Domains | No DMARC | DMARC enforced |
|---|---|---|---|
| .com.tw | 1,084 | 42.3% | 25.4% |
| .edu.tw | 180 | 46.1% | 21.1% |
| .gov.tw | 167 | 44.3% | 34.7% |
| .org.tw | 141 | 46.8% | 22.7% |
| .net.tw | 34 | 52.9% | 29.4% |
Why it matters for anyone who sends email#
DMARC tells receiving mail servers what to do with mail that claims to come from your domain but fails SPF and DKIM. Without it, anyone can send mail that looks like it comes from your shop, and inbox providers have less to go on when they decide whether your real mail is trustworthy.
Gmail and Yahoo require bulk senders to publish DMARC, alongside SPF and DKIM S2. A shop that sends promotions to Gmail addresses without DMARC risks having those emails filtered or rejected. For the details, see Gmail and Yahoo sender requirements.
p=none is a good first step, not the goal. It sends you reports but blocks nothing. Once your real senders pass, move to quarantine and then reject. Our guide on how to set up DMARC walks through the order.
Check your own domain#
The free email domain checker reads the same public records for any domain you enter and tells you what to fix. It needs no account and connects to nothing but DNS.
If you send campaigns with Tellnod, it sets up SPF, DKIM and DMARC for your domain from the chat and sends from a shared, authenticated domain until yours is ready.
Method#
- Domain list: every .tw domain in the Tranco top 1 million list of 7 November 2026 (2,724 domains), and the top 2,000 domains of the same list as a global comparison S1.
- Records: on 7 November 2026 we looked up each domain’s MX, its root TXT records (for SPF) and the TXT record at _dmarc (for DMARC), using public DNS only. No mail server was contacted.
- Scope: only domains with at least one MX record are counted, so the figures describe domains that receive email. Domains whose lookups failed or timed out were left out: 127 .tw domains and 58 global ones.
- DKIM is not measured. DKIM keys sit under names each sender chooses, and DNS cannot list them, so a scan can’t count them reliably.
- The report gives totals only and does not name any domain.
FAQ#
Does having no DMARC mean a domain’s email goes to spam?
Not on its own. It means receivers have no instruction from the domain owner and the domain is easier to spoof. For bulk senders to Gmail and Yahoo, DMARC is required.
Why compare with the global top 2,000 sites?
They are the most-visited sites on the same ranking, measured the same day the same way, so the comparison shows how far Taiwan’s popular domains are from common practice among large senders.
Can I use these figures?
Yes. Please cite Tellnod and link to this page, and keep the method note with the numbers.
Sources#
- [S1] Tranco: a research-oriented top sites ranking, checked
- [S2] Google Workspace Admin Help: Email sender guidelines, checked